[squid-users] Understand GOOGLEVIDEO Url from access.log

Amos Jeffries squid3 at treenet.co.nz
Tue May 10 10:07:06 UTC 2016


On 10/05/2016 9:56 p.m., Ralf Hildebrandt wrote:
>> Once you know the legal situation look into
>> <http://wiki.squid-cache.org/Features/SslPeekAndSplice>. You will also
>> need to be using the latest Squid packages (3.5.19 or 4.0.10 today) and
>> regularly updating. TLS interception is an arms race situation that is
>> constantly changing both the security encryption and the attack methods
>> to break into it.
> 
> Does that even work with Chrome (certificate pinning for google sites)?
> (just curious)
> 

Maybe. They document that manually inserted CA certs override pinning.
But I'm not sure they follow that documented practice 100% of the time.

Amos



More information about the squid-users mailing list